#969324 mutt feature request add configure option

Package:
mutt
Source:
mutt
Description:
text-based mailreader supporting MIME, GPG, PGP and threading
Submitter:
Arsen STASIC
Date:
2025-02-18 19:15:04 UTC
Severity:
wishlist
Tags:
#969324#5
Date:
2020-08-31 11:50:35 UTC
From:
To:
I would like to suggest to add following configure option: --enable-autocrypt
See attached patch.

cheers
arsen
#969324#10
Date:
2020-09-15 05:25:33 UTC
From:
To:
Dear package maintainers,

autocrypt is a cryptographic protocol for email clients aiming to simplify key exchange and enabling encryption on basis of OpenPGP and due to the fact that WoT (Web of Trust) is broken [0] since June 2019 [1] (Daniel Kahn Gillmor (dkg)) it's a needed feature.

These MUAs (Mail User Agents) support autocrypt already:
Thunderbird, Mailpile, Delta Chat Messenger, K-9 Mail and Mutt.

Please consider my patch.

cheers,
Arsen

[0] https://lwn.net/Articles/792366/
[1] https://dkg.fifthhorseman.net/blog/openpgp-certificate-flooding.html
#969324#21
Date:
2020-12-30 12:31:37 UTC
From:
To:
Hello,

I second that.

Bye,

Joerg
#969324#26
Date:
2022-02-06 19:20:15 UTC
From:
To:
Imho this "feature" promotes a very unsafe key exchange method where
an attacker can easily exchange trusted and verified keys by any keys
he likes.

Thunderbird support has been dropped although it does support
some kind of key exchange that is in some aspect "compatible" with
autocrypt. Last time I looked K9 mail had bigger problems than
autocrypt support.

This is even more broken than the problem it tries to solve and a waste
of electrons.
#969324#31
Date:
2025-01-21 13:21:08 UTC
From:
To:
I agree that --enable-autocrypt should be applied in debian's mutt
package.

Autocrypt may not be as secure as traditional OpenPGP fingerprint
verification, but on the other hand, almost no one actually does OpenPGP
fingerprint verification.  And autocrypt doesn't stop people from doing
fingerprint verification who want to do it.

The realistic alternative to using autocrypt at scale is basically
annoying and error-prone manual OpenPGP certificate distribution, which
is decidedly not great.

Enabling it in mutt as proposed here probably also means adding a
build-dependency on libsqlite3-dev, by the way.

Please do --enable-autocrypt in mutt.
#969324#36
Date:
2025-02-18 19:11:55 UTC
From:
To:
I've just offered
https://salsa.debian.org/mutt-team/mutt/-/merge_requests/7 as a simple
fix for https://bugs.debian.org/969324 (enabling autocrypt for mutt
users).

Please let me know if there's anything else i can do to move this along!